Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XSe68I4N7ny3SnrMftZidzyh7ls.roa
File: XSe68I4N7ny3SnrMftZidzyh7ls.roa (raw, json)
Hash identifier: 5uekA7UI3Rk5awOw+10nMQKWGCpPB06M+mTP53NM5ZQ=
Subject key identifier: 5D:27:BA:F0:8E:0D:EE:7C:B7:4A:7A:CC:7E:D6:62:77:3C:A1:EE:5B
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A0D7ECCDA4DB4C2655F8663FA3327ED5D3
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XSe68I4N7ny3SnrMftZidzyh7ls.roa
Signing time: Fri 25 Sep 2026 09:36:55 +0000
ROA not before: Fri 25 Sep 2026 09:36:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57829
IP address blocks: 192.36.8.0/24 maxlen: 24
192.36.9.0/24 maxlen: 24
192.165.109.0/24 maxlen: 24
192.165.247.0/24 maxlen: 24
193.180.21.0/24 maxlen: 24
193.180.94.0/23 maxlen: 23
193.181.176.0/24 maxlen: 24
193.234.1.0/24 maxlen: 24
193.234.44.0/24 maxlen: 24
193.234.45.0/24 maxlen: 24
193.234.90.0/24 maxlen: 24
193.234.91.0/24 maxlen: 24
193.235.192.0/24 maxlen: 24
194.14.195.0/24 maxlen: 24
194.68.212.0/24 maxlen: 24
194.68.236.0/24 maxlen: 24
194.71.204.0/24 maxlen: 24
194.103.47.0/24 maxlen: 24
2a01:280:368::/48 maxlen: 48
2a01:280:3e8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:ec:cd:a4:db:4c:26:55:f8:66:3f:a3:32:7e:d5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 25 09:36:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d27baf08e0dee7cb74a7acc7ed662773ca1ee5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:aa:5e:91:3a:23:dc:9a:bd:16:11:6a:aa:
27:2a:9c:83:11:5f:7c:26:70:31:6e:8c:f6:b7:cc:
72:41:3a:5f:ef:f1:94:22:a2:39:ba:71:a1:49:20:
af:e8:bc:4c:25:09:2f:1e:84:ee:79:02:df:4b:02:
2f:9f:57:d6:81:21:83:67:6b:4b:aa:0c:61:79:ee:
e9:98:c7:14:3f:8a:10:87:9d:69:d6:7c:54:fe:0c:
4b:87:f6:3d:b9:95:32:1a:74:9e:b7:c6:d9:63:61:
b2:c4:65:18:07:29:01:bc:d2:7d:97:44:dc:2e:5d:
fb:c7:5a:41:81:6f:7e:87:6d:89:64:4b:63:79:86:
79:30:41:4b:40:da:b5:9c:cb:4d:5e:6b:66:fc:ee:
6a:99:9b:ca:d7:56:90:36:d9:cd:9b:0c:d5:8e:09:
b3:78:90:65:d2:c1:ec:a9:c8:fb:71:87:05:9a:14:
51:af:f5:2a:e2:1e:7f:a9:68:01:38:8d:9a:3d:e1:
ea:c4:ad:0f:52:6f:00:6c:a4:d1:eb:d4:0a:91:f0:
56:08:82:2d:9a:f1:87:c5:ca:fc:17:d6:1e:e3:0c:
0f:74:e9:55:12:7c:84:92:13:0a:47:65:d2:a7:a6:
c3:60:2c:23:e2:6e:dc:31:2a:e9:06:cc:62:f7:40:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:27:BA:F0:8E:0D:EE:7C:B7:4A:7A:CC:7E:D6:62:77:3C:A1:EE:5B
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XSe68I4N7ny3SnrMftZidzyh7ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.8.0/23
192.165.109.0/24
192.165.247.0/24
193.180.21.0/24
193.180.94.0/23
193.181.176.0/24
193.234.1.0/24
193.234.44.0/23
193.234.90.0/23
193.235.192.0/24
194.14.195.0/24
194.68.212.0/24
194.68.236.0/24
194.71.204.0/24
194.103.47.0/24
IPv6:
2a01:280:368::/48
2a01:280:3e8::/48
Signature Algorithm: sha256WithRSAEncryption
69:38:14:cd:96:0e:13:6c:6d:09:62:e7:62:5d:3e:2b:3d:a6:
36:e4:9b:c3:e9:cd:47:63:45:c5:71:65:55:69:62:38:15:6b:
d5:43:56:12:02:7a:1f:25:7b:06:d7:5b:28:c9:8a:19:fa:6f:
e8:d5:43:5e:af:82:41:ef:23:b6:49:71:ba:32:47:e5:94:0c:
18:04:eb:b1:da:4f:fd:17:9c:5d:19:02:3d:4d:f5:ea:d4:c2:
c0:4e:fb:16:b8:d3:d8:c0:c1:27:ce:59:6a:e2:9d:84:6b:7a:
f0:5b:c6:50:dd:e5:b4:19:0a:1b:72:bd:9c:89:89:cf:40:7c:
67:1d:74:16:ba:8e:d3:77:ce:15:a2:e0:c4:fa:7c:40:87:9c:
7c:01:63:9c:65:2a:d9:2d:fe:21:3d:e8:4a:08:dc:5f:49:50:
b4:29:95:a7:be:1e:44:bc:b2:2c:a0:2d:ba:8e:e4:94:c1:a8:
0f:ce:3c:7c:22:fe:44:3a:ae:ca:b9:20:df:b8:05:b7:ee:6e:
1f:14:2a:d2:8c:eb:95:da:db:af:c6:cc:9b:28:cf:c4:ec:d0:
2b:e1:0a:ab:28:da:67:51:ed:07:fd:91:57:8b:6b:1e:4c:38:
c8:d0:10:bb:c6:a3:3d:ee:6e:b0:f8:04:8a:37:3d:20:21:b4:
18:c1:29:00
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgISAaDX7M2k20wmVfhmP6MyftXTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjYwOTI1MDkzNjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDI3YmFmMDhlMGRlZTdjYjc0YTdhY2M3ZWQ2NjI3NzNjYTFlZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArauqXpE6I9yavRYRaqonKpyDEV98
JnAxboz2t8xyQTpf7/GUIqI5unGhSSCv6LxMJQkvHoTueQLfSwIvn1fWgSGDZ2tL
qgxhee7pmMcUP4oQh51p1nxU/gxLh/Y9uZUyGnSet8bZY2GyxGUYBykBvNJ9l0Tc
Ll37x1pBgW9+h22JZEtjeYZ5MEFLQNq1nMtNXmtm/O5qmZvK11aQNtnNmwzVjgmz
eJBl0sHsqcj7cYcFmhRRr/Uq4h5/qWgBOI2aPeHqxK0PUm8AbKTR69QKkfBWCIIt
mvGHxcr8F9Ye4wwPdOlVEnyEkhMKR2XSp6bDYCwj4m7cMSrpBsxi90AQhQIDAQAB
o4ICeDCCAnQwHQYDVR0OBBYEFF0nuvCODe58t0p6zH7WYnc8oe5bMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvWFNlNjhJNE43bnkzU25yTWZ0WmlkenloN2xzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwYAQCAAEwWgMEAcAkCAME
AMClbQMEAMCl9wMEAMG0FQMEAcG0XgMEAMG1sAMEAMHqAQMEAcHqLAMEAcHqWgME
AMHrwAMEAMIOwwMEAMJE1AMEAMJE7AMEAMJHzAMEAMJnLzAYBAIAAjASAwcAKgEC
gANoAwcAKgECgAPoMA0GCSqGSIb3DQEBCwUAA4IBAQBpOBTNlg4TbG0JYudiXT4r
PaY25JvD6c1HY0XFcWVVaWI4FWvVQ1YSAnofJXsG11soyYoZ+m/o1UNer4JB7yO2
SXG6MkfllAwYBOux2k/9F5xdGQI9TfXq1MLATvsWuNPYwMEnzllq4p2Ea3rwW8ZQ
3eW0GQobcr2ciYnPQHxnHXQWuo7Td84VouDE+nxAh5x8AWOcZSrZLf4hPehKCNxf
SVC0KZWnvh5EvLIsoC26juSUwagPzjx8Iv5EOq7KuSDfuAW37m4fFCrSjOuV2tuv
xsybKM/E7NAr4QqrKNpnUe0H/ZFXi2seTDjI0BC7xqM97m6w+ASKNz0gIbQYwSkA
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:36:48 2026 by rpki-client